TheWindowsUpdate.com

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42991 Windows Push Notifications Elevation of Privilege Vulnerability→

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-48568 Secure Boot Security Feature Bypass Vulnerability→

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability→

Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 u… Continue reading CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability→

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-44823 Microsoft Excel Remote Code Execution Vulnerability→

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability→

Information published. Continue reading CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability→